General
-
Target
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118
-
Size
43KB
-
Sample
240918-14jzpawanb
-
MD5
ea1028d51351ab6846ebba118883f6f2
-
SHA1
eeee40c8300f8d6dc94367a46fed401b5716365a
-
SHA256
d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36
-
SHA512
18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082
-
SSDEEP
768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12
Behavioral task
behavioral1
Sample
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ea1028d51351ab6846ebba118883f6f2_JaffaCakes118
-
Size
43KB
-
MD5
ea1028d51351ab6846ebba118883f6f2
-
SHA1
eeee40c8300f8d6dc94367a46fed401b5716365a
-
SHA256
d585e9fef9400725389a6dab42673766e2b53db9fd79fb0420e5addb7a4bda36
-
SHA512
18169a5cf27c4081307781476535f2a4237abf65fbc393054ce3496a8fb6064d4226f985e242f3dbdd7c2d54c472be0cb446e6ba77c3e24aae4188ca6beee082
-
SSDEEP
768:pwwyxQouEWjSHD23fbU50aaaxwdYzsRPw8rt9pEUNBwVM1hGs1UWG2lA:U4jqi5axwdrPp1N6VMus12
Score10/10-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage
-
Suspicious use of SetThreadContext
-